Related branches

Related bugs

Sprints

Whiteboard

Etherpad notes:

Userspace tools improvements: what are they
- rewrite in something other than perl?
- not at this time. eventually yes, but other things are needed
- new tools in another language-- python if stuff is missing, then write in in the new parser stuff split out
- use existing tools to do profiling and make sure they do it right
- rate limiting (short term-- flip rate limiting bit and) (aa-genprof)
- deroot auditd and use those logs
- learning stream not to logs
- does not offer to edit abstractions
- doesn't suggest to use variable (@{PROC} and @{HOME})
- alias support
- suggesting community profiles
- tool workflow
- rejects from other profiles not handled well
- suggestions for globbing are not great
- blacklisting of applications
- globbing in profile attachments
- list of log files
- is aa-logprof still viable?
- named profiles and binary globbing (all tools)
- P[Uu]x
- some bug jj knows about that is hard to describe (and has fix)
- child profiles
- nest 1 level
- encapsulated child profiles (parser and tools) and how they interact with hats
- parser memory usage (patch pending)
- dfa sharing in the parser
- userspace needs to migrate away from needing compat patches (ie, use new introspection interface)
- v3 tagging
- aa-notify rate limiting/summarizing
- some sort of tool to get from notification to policy edits
- [ACTION] kees: reduce perl dependency for Ubuntu ISOs

kernel upstreaming
- upstream improvements listed above
- we (Ubuntu) need to carry the compat patch for a while because of lts-backports
- need the compat patch for networking and introspection. probably need for o+1
- to get rid of this the tools need to be updated